Cracking WEP - Revision history

BenFranske: test edit

2011-02-09T00:30:08Z

test edit

← Older revision		Revision as of 00:30, 9 February 2011
Line 1:		Line 1:
	:'''Introduction to Cracking WEP using BackTrack 3''' -- ''By L. ~~YANG~~.''		:'''Introduction to Cracking WEP using BackTrack 3''' -- ''By L. Yang.''
	In this article, I will create a wireless network lab and show you how to crack a WEP key using BackTrack 3. As you may know, WEP, Wired Equivalent Privacy, is a week security protocol that can be broken or crack easily. There are dozens of articles about cracking WEP on the internet. If this article doesn’t give you enough information, please do some online researches to find more information and detail. The purpose of this lab is not encourage you to be a hacker. I write this article for educational purpose, and to prove that WEP is a weak security protocol that can be hacked easily.		In this article, I will create a wireless network lab and show you how to crack a WEP key using BackTrack 3. As you may know, WEP, Wired Equivalent Privacy, is a week security protocol that can be broken or crack easily. There are dozens of articles about cracking WEP on the internet. If this article doesn’t give you enough information, please do some online researches to find more information and detail. The purpose of this lab is not encourage you to be a hacker. I write this article for educational purpose, and to prove that WEP is a weak security protocol that can be hacked easily.

Lueyang at 03:09, 2 August 2010

2010-08-02T03:09:29Z

← Older revision		Revision as of 03:09, 2 August 2010
Line 42:		Line 42:
	Take note some of the information such as the BSSID, the channel number, and the MAC address of the wireless access point that you want to crack. In this lab, the SSID is "TestingAP", channel 1, and the MAC address of 00:13:10:3C:51:5B. Close this window when you're done.		Take note some of the information such as the BSSID, the channel number, and the MAC address of the wireless access point that you want to crack. In this lab, the SSID is "TestingAP", channel 1, and the MAC address of 00:13:10:3C:51:5B. Close this window when you're done.

	====<h2 id="ly-proj" style="margin:3px; background:#cef2e0; font-size:90%; font-weight:bold; border:1px solid #a3bfb1; text-align:left; color:#000; padding:0.2em 0.4em;">Generating A Faked MAC Address</h2>====
	~~[[Image:bt04.jpg\|thumb\|Results of the commands.\|250px]]~~

	*Run a '''Konsole''' terminal program. To run a '''Konsole''' terminal, click on the black screen icon that is located on the lower left hand corner next to the '''K Menu''' icon.		*Run a '''Konsole''' terminal program. To run a '''Konsole''' terminal, click on the black screen icon that is located on the lower left hand corner next to the '''K Menu''' icon.

	~~To generate a faked MAC Address, follow the steps below.~~
	*In the '''Konsole''' terminal, enter the command below to fine your device interface name. When the name of your device interface name is shown, take note of the device interface name. My device interface name is wlan0, as shown in the snapshot on the right.		*In the '''Konsole''' terminal, enter the command below to fine your device interface name. When the name of your device interface name is shown, take note of the device interface name. My device interface name is wlan0, as shown in the snapshot on the right.
	airmon-ng		airmon-ng
	*Enter the 4 commands below ~~by typing each command and press Enter key~~. These commands are optional if you don't need change ~~you adapter~~ MAC Address.		[[Image:bt04.jpg\|thumb\|Results of the commands.\|250px]]
			The device interface name of my adapter is '''wlan0'''.
			====<h2 id="ly-proj" style="margin:3px; background:#cef2e0; font-size:90%; font-weight:bold; border:1px solid #a3bfb1; text-align:left; color:#000; padding:0.2em 0.4em;">Generating A Faked MAC Address</h2>====
			The purpose of four commands below is to generate a faked MAC Address for your wireless adapter. These commands are optional if you don't need to change the MAC Address of your adapter.

			*Enter the 4 commands below by typing each command and press Enter key.
	airmon-ng stop ''<your device Interface>''		airmon-ng stop ''<your device Interface>''
	ifconfig ''<your device Interface>'' down		ifconfig ''<your device Interface>'' down
	macchanger --mac 00:11:22:33:44:55 ''<your device Interface>''		macchanger --mac 00:11:22:33:44:55 ''<your device Interface>''
	airmon-ng start ''<your device Interface>''		airmon-ng start ''<your device Interface>''
			These commands will change the MAC Address of your wireless adapter to a faked MAC Address of 00:11:22:33:44:55.
	~~The purpose of these~~ commands ~~is to~~ change the MAC Address of your wireless adapter to a faked MAC Address of 00:11:22:33:44:55.

	All the result of the previous commands should look like the screenshot on the right.		All the result of the previous commands should look like the screenshot on the right.

Lueyang: /* Generating A Faked MAC Address */

2010-08-02T02:55:05Z

Generating A Faked MAC Address

← Older revision		Revision as of 02:55, 2 August 2010
Line 44:		Line 44:
	====<h2 id="ly-proj" style="margin:3px; background:#cef2e0; font-size:90%; font-weight:bold; border:1px solid #a3bfb1; text-align:left; color:#000; padding:0.2em 0.4em;">Generating A Faked MAC Address</h2>====		====<h2 id="ly-proj" style="margin:3px; background:#cef2e0; font-size:90%; font-weight:bold; border:1px solid #a3bfb1; text-align:left; color:#000; padding:0.2em 0.4em;">Generating A Faked MAC Address</h2>====
	[[Image:bt04.jpg\|thumb\|Results of the commands.\|250px]]		[[Image:bt04.jpg\|thumb\|Results of the commands.\|250px]]
	~~This section is optional for someone who doesn't need change you adapter MAC Address. To generate a faked MAC Address, follow the steps below.~~
	*Run a '''Konsole''' terminal program. To run a '''Konsole''' terminal, click on the black screen icon that is located on the lower left hand corner next to the '''K Menu''' icon.		*Run a '''Konsole''' terminal program. To run a '''Konsole''' terminal, click on the black screen icon that is located on the lower left hand corner next to the '''K Menu''' icon.

			To generate a faked MAC Address, follow the steps below.
	*In the '''Konsole''' terminal, enter the command below to fine your device interface name. When the name of your device interface name is shown, take note of the device interface name. My device interface name is wlan0, as shown in the snapshot on the right.		*In the '''Konsole''' terminal, enter the command below to fine your device interface name. When the name of your device interface name is shown, take note of the device interface name. My device interface name is wlan0, as shown in the snapshot on the right.
	airmon-ng		airmon-ng
	*Enter the 4 commands below by typing each command and press Enter key.		*Enter the 4 commands below by typing each command and press Enter key. These commands are optional if you don't need change you adapter MAC Address.
	airmon-ng stop ''<your device Interface>''		airmon-ng stop ''<your device Interface>''
	ifconfig ''<your device Interface>'' down		ifconfig ''<your device Interface>'' down

Lueyang at 19:08, 1 August 2010

2010-08-01T19:08:04Z

Lueyang at 18:58, 1 August 2010

2010-08-01T18:58:20Z

← Older revision		Revision as of 18:58, 1 August 2010
Line 45:		Line 45:
	[[Image:bt04.jpg\|thumb\|Results of the commands.\|250px]]		[[Image:bt04.jpg\|thumb\|Results of the commands.\|250px]]
	This section is optional for someone who doesn't need change you adapter MAC Address. To generate a faked MAC Address, follow the steps below.		This section is optional for someone who doesn't need change you adapter MAC Address. To generate a faked MAC Address, follow the steps below.
	*Run ~~the~~ '''Shell – Konsole''' terminal program. To run ~~the~~ '''Shell - Konsole''' terminal, click on the black screen icon that is located on the lower left hand corner next to the '''K Menu''' icon.		*Run a '''Shell – Konsole''' terminal program. To run a '''Shell - Konsole''' terminal, click on the black screen icon that is located on the lower left hand corner next to the '''K Menu''' icon.

	*In the '''Shell - Konsole''' terminal, enter the command below to fine your device interface name. When the name of your device interface name is shown, take note of the device interface name. My device interface name is wlan0, as shown in the snapshot on the right.		*In the '''Shell - Konsole''' terminal, enter the command below to fine your device interface name. When the name of your device interface name is shown, take note of the device interface name. My device interface name is wlan0, as shown in the snapshot on the right.

Lueyang at 18:55, 1 August 2010

2010-08-01T18:55:04Z

← Older revision		Revision as of 18:55, 1 August 2010
Line 34:		Line 34:
	Follow each section and step below to check for a wireless adapter, capture data packets, and crack a WEP key using BackTrack 3.		Follow each section and step below to check for a wireless adapter, capture data packets, and crack a WEP key using BackTrack 3.
	====<h2 id="ly-proj" style="margin:3px; background:#cef2e0; font-size:90%; font-weight:bold; border:1px solid #a3bfb1; text-align:left; color:#000; padding:0.2em 0.4em;">Checking Compatibility for an Adapter</h2>====		====<h2 id="ly-proj" style="margin:3px; background:#cef2e0; font-size:90%; font-weight:bold; border:1px solid #a3bfb1; text-align:left; color:#000; padding:0.2em 0.4em;">Checking Compatibility for an Adapter</h2>====
	*In the Sniffing PC that is running BackTrack 3, select the '''K''' icon located on the lower left hand corner. Then select '''Internet''', and then click on '''Wireless Assistant'''. When the '''Wireless Assistant''' window appear, you should see the target wireless access point that you want to hack. If you don’t have a compatible wireless adapter, it will prompt you an error massage says “No usable wireless device found.”		*In the Sniffing PC that is running BackTrack 3, select the '''K Menu''' icon located on the lower left hand corner. Then select '''Internet''', and then click on '''Wireless Assistant'''. When the '''Wireless Assistant''' window appear, you should see the target wireless access point that you want to hack. If you don’t have a compatible wireless adapter, it will prompt you an error massage says “No usable wireless device found.”
	{\|		{\|
	\| [[Image:bt02.jpg\|thumb\|upright\|If the device is compatible\|300px]]		\| [[Image:bt02.jpg\|thumb\|upright\|If the device is compatible\|300px]]
Line 42:		Line 42:
	Take note some of the information such as the BSSID, the channel number, and the MAC address of the wireless access point that you want to crack. In this lab, the SSID is "TestingAP", channel 1, and the MAC address of 00:13:10:3C:51:5B. Close this window when you're done.		Take note some of the information such as the BSSID, the channel number, and the MAC address of the wireless access point that you want to crack. In this lab, the SSID is "TestingAP", channel 1, and the MAC address of 00:13:10:3C:51:5B. Close this window when you're done.

	====<h2 id="ly-proj" style="margin:3px; background:#cef2e0; font-size:90%; font-weight:bold; border:1px solid #a3bfb1; text-align:left; color:#000; padding:0.2em 0.4em;">Generating ~~faked~~ MAC Address</h2>====		====<h2 id="ly-proj" style="margin:3px; background:#cef2e0; font-size:90%; font-weight:bold; border:1px solid #a3bfb1; text-align:left; color:#000; padding:0.2em 0.4em;">Generating A Faked MAC Address</h2>====
	[[Image:bt04.jpg\|thumb\|Results of the commands.\|250px]]		[[Image:bt04.jpg\|thumb\|Results of the commands.\|250px]]
	*~~Next, run a~~ '''Shell – Konsole''' ~~window~~. To run the '''Shell - Konsole''' ~~window~~, click on the black screen icon that is located on the lower left hand corner next to the '''K''' icon.		This section is optional for someone who doesn't need change you adapter MAC Address. To generate a faked MAC Address, follow the steps below.
			*Run the '''Shell – Konsole''' terminal program. To run the '''Shell - Konsole''' terminal, click on the black screen icon that is located on the lower left hand corner next to the '''K Menu''' icon.

	*In the '''Shell - Konsole''' ~~window~~, enter the command below to fine your device interface name. When the name of your device interface name is shown, take note of the device interface name. My device interface name is wlan0, as shown in the snapshot on the right.		*In the '''Shell - Konsole''' terminal, enter the command below to fine your device interface name. When the name of your device interface name is shown, take note of the device interface name. My device interface name is wlan0, as shown in the snapshot on the right.
	airmon-ng		airmon-ng
	*Enter the 4 commands below by typing each command and press Enter key.		*Enter the 4 commands below by typing each command and press Enter key.
Line 75:		Line 76:
	The following two commands are used to attack and force the access point (Target AP) to inject data packets to increase data traffic on the network. However, when you are running these two commands, any client computer that is connecting to the access point may lose connection or unable to connect to the Internet. Sometime you may have to power-cycle the access point in order to get connection again. Some time you may have difficulty using these commands, and you may get some massage says that attacking was not successful. If you have difficulty using these commands during the steps below, just ignore it and continue working on the next step. (This section may be optional for someone.)		The following two commands are used to attack and force the access point (Target AP) to inject data packets to increase data traffic on the network. However, when you are running these two commands, any client computer that is connecting to the access point may lose connection or unable to connect to the Internet. Sometime you may have to power-cycle the access point in order to get connection again. Some time you may have difficulty using these commands, and you may get some massage says that attacking was not successful. If you have difficulty using these commands during the steps below, just ignore it and continue working on the next step. (This section may be optional for someone.)

	*Open a new '''Shell – Konsole''' ~~windows~~. '''Important:''' Make sure to leave the previous commands running without closing the first '''Shell - Konsole''' ~~window~~.		*Open a new '''Shell – Konsole''' terminal. '''Important:''' Make sure to leave the previous commands running without closing the first '''Shell - Konsole''' terminal.

	[[Image:bt07.jpg\|thumb\|Increasing traffic snapshot.\|250px]]		[[Image:bt07.jpg\|thumb\|Increasing traffic snapshot.\|250px]]
Line 92:		Line 93:
	[[Image:bt08.jpg\|thumb\|thumb\|upright\|WEP cracking command output: KEY FOUND!\|592px]]		[[Image:bt08.jpg\|thumb\|thumb\|upright\|WEP cracking command output: KEY FOUND!\|592px]]
	This is the final and the actual step to crack the WEP key.		This is the final and the actual step to crack the WEP key.
	'''NOTE:'''You should wait until enough data packets has been captured before you run the cracking command below; otherwise it will not success. Check to see if you have enough data packets capture in the firs Shell - Konsole ~~window~~; it is the number right below the #data column. You should wait until this number goes above 10000 or 20000 in order to successfully crack the WEP key.		'''NOTE:'''You should wait until enough data packets has been captured before you run the cracking command below; otherwise it will not success. Check to see if you have enough data packets capture in the firs Shell - Konsole terminal; it is the number right below the #data column. You should wait until this number goes above 10000 or 20000 in order to successfully crack the WEP key.

	*When you are ready, open the third Shell - Konsole ~~window~~ without closing the first two Shell - Konsole ~~windows~~. You should keep them open and running.		*When you are ready, open the third Shell - Konsole teminal without closing the first two Shell - Konsole terminal. You should keep them open and running.

	* Enter the following command.		* Enter the following command.
Line 104:		Line 105:
	===<h2 id="ly-proj" style="margin:3px; background:#cef2e0; font-size:110%; font-weight:bold; border:1px solid #a3bfb1; text-align:left; color:#000; padding:0.2em 0.4em;">Conclusion</h2>===		===<h2 id="ly-proj" style="margin:3px; background:#cef2e0; font-size:110%; font-weight:bold; border:1px solid #a3bfb1; text-align:left; color:#000; padding:0.2em 0.4em;">Conclusion</h2>===
	Cracking WEP is fairly easy. Even though I have little knowledge about using Linux and networking, I can crack a WEP key easily. Using Linux to crack WEP is more common than using Windows. That is because most of the software and tools needed to crack WEP are build-in within Linux Operating system, and there are more Linux supported wireless adapters available. If you want to crack a WEP for any reason, you should build your own lab. You should be aware that hacking others' network is illegal, so please don't try. This article is written for educational purpose, so I built my own lab and cracked my own network. It takes me a few days to write this article, but the actual time that it takes me to crack the WEP key is less than five minutes. The following steps and commands are what I actually have done to crack the WEP key in this lab.		Cracking WEP is fairly easy. Even though I have little knowledge about using Linux and networking, I can crack a WEP key easily. Using Linux to crack WEP is more common than using Windows. That is because most of the software and tools needed to crack WEP are build-in within Linux Operating system, and there are more Linux supported wireless adapters available. If you want to crack a WEP for any reason, you should build your own lab. You should be aware that hacking others' network is illegal, so please don't try. This article is written for educational purpose, so I built my own lab and cracked my own network. It takes me a few days to write this article, but the actual time that it takes me to crack the WEP key is less than five minutes. The following steps and commands are what I actually have done to crack the WEP key in this lab.
	*'''Step 1'''. I opened a Konsole ~~window~~ and typed the following commands.		*'''Step 1'''. I opened a Shell - Konsole terminal and typed the following commands.
	airmon-ng		airmon-ng
	airmon-ng stop wlan0		airmon-ng stop wlan0
Line 112:		Line 113:
	airodump-ng wlan0		airodump-ng wlan0
	airodump-ng -c 1 -w capfile --bssid 00:13:10:3C:51:5B wlan0		airodump-ng -c 1 -w capfile --bssid 00:13:10:3C:51:5B wlan0
	*'''Step 2'''. I opened another Konsole ~~window~~ and typed the following commands.		*'''Step 2'''. I opened another Shell - Konsole terminal and typed the following commands.
	aireplay-ng -1 0 -a 00:13:10:3C:51:5B -e TestingAP wlan0		aireplay-ng -1 0 -a 00:13:10:3C:51:5B -e TestingAP wlan0
	aireplay-ng -3 -b 00:13:10:3C:51:5B -h 00:11:22:33:44:55 wlan0		aireplay-ng -3 -b 00:13:10:3C:51:5B -h 00:11:22:33:44:55 wlan0
	*'''Step 3'''. I opened another Konsole ~~window~~ and typed the following command.		*'''Step 3'''. I opened another Shell - Konsole terminal and typed the following command.
	aircrack-ng -b 00:13:10:3C:51:5B capfile-01.cap		aircrack-ng -b 00:13:10:3C:51:5B capfile-01.cap

	KEY FOUND!		KEY FOUND!

Lueyang at 18:01, 1 August 2010

2010-08-01T18:01:16Z

← Older revision		Revision as of 18:01, 1 August 2010
Line 110:		Line 110:
	macchanger --mac 00:11:22:33:44:55 wlan0		macchanger --mac 00:11:22:33:44:55 wlan0
	airmon-ng start wlan0		airmon-ng start wlan0
	~~airmon-ng wlan0~~
	airodump-ng wlan0		airodump-ng wlan0
	airodump-ng -c 1 -w capfile --bssid 00:13:10:3C:51:5B wlan0		airodump-ng -c 1 -w capfile --bssid 00:13:10:3C:51:5B wlan0

Lueyang at 16:46, 1 August 2010

2010-08-01T16:46:55Z

← Older revision		Revision as of 16:46, 1 August 2010
Line 1:		Line 1:
	:'''Cracking WEP using BackTrack 3''' -- ''By L. YANG.''		:'''Introduction to Cracking WEP using BackTrack 3''' -- ''By L. YANG.''
	In this article, I will create a wireless network lab and show you how to crack a WEP key using BackTrack 3. As you may know, WEP, Wired Equivalent Privacy, is a week security protocol that can be broken or crack easily. There are dozens of articles about cracking WEP on the internet. If this article doesn’t give you enough information, please do some online researches to find more information and detail. The purpose of this lab is not encourage you to be a hacker. I write this article for educational purpose, and to prove that WEP is a weak security protocol that can be hacked easily.		In this article, I will create a wireless network lab and show you how to crack a WEP key using BackTrack 3. As you may know, WEP, Wired Equivalent Privacy, is a week security protocol that can be broken or crack easily. There are dozens of articles about cracking WEP on the internet. If this article doesn’t give you enough information, please do some online researches to find more information and detail. The purpose of this lab is not encourage you to be a hacker. I write this article for educational purpose, and to prove that WEP is a weak security protocol that can be hacked easily.

Lueyang at 16:46, 1 August 2010

2010-08-01T16:46:16Z

← Older revision		Revision as of 16:46, 1 August 2010
Line 2:		Line 2:
	In this article, I will create a wireless network lab and show you how to crack a WEP key using BackTrack 3. As you may know, WEP, Wired Equivalent Privacy, is a week security protocol that can be broken or crack easily. There are dozens of articles about cracking WEP on the internet. If this article doesn’t give you enough information, please do some online researches to find more information and detail. The purpose of this lab is not encourage you to be a hacker. I write this article for educational purpose, and to prove that WEP is a weak security protocol that can be hacked easily.		In this article, I will create a wireless network lab and show you how to crack a WEP key using BackTrack 3. As you may know, WEP, Wired Equivalent Privacy, is a week security protocol that can be broken or crack easily. There are dozens of articles about cracking WEP on the internet. If this article doesn’t give you enough information, please do some online researches to find more information and detail. The purpose of this lab is not encourage you to be a hacker. I write this article for educational purpose, and to prove that WEP is a weak security protocol that can be hacked easily.

	===<h2 id="ly-proj" style="margin:3px; background:#cef2e0; font-size:110%; font-weight:bold; border:1px solid #a3bfb1; text-align:left; color:#000; padding:0.2em 0.4em;">Hardware ~~required~~</h2>===		===<h2 id="ly-proj" style="margin:3px; background:#cef2e0; font-size:110%; font-weight:bold; border:1px solid #a3bfb1; text-align:left; color:#000; padding:0.2em 0.4em;">Hardware and Software Required</h2>===
	Here is a list of equipment and hardware Requirement for this lab:		Here is a list of equipment and hardware Requirement for this lab:
	*A wireless router - this could be any wireless router that supported WEP security encryption.		*A wireless router - this could be any wireless router that supported WEP security encryption.

Lueyang at 16:40, 1 August 2010

2010-08-01T16:40:37Z

← Older revision		Revision as of 16:40, 1 August 2010
Line 12:		Line 12:
	[[Image:topology.jpg\|thumb\|This is a picture of an idea for the network topology.\|320px]]		[[Image:topology.jpg\|thumb\|This is a picture of an idea for the network topology.\|320px]]

	Below are the software and hardware I used in this lab. If you want to setup a lab like this, find the hardware and tools that suitable for you. The picture on the right shows some information and idea of this network topology, and please be aware that the device names used in this lab are clearly addressed this picture		Below are the software and hardware I used in this lab. If you want to setup a lab like this, find the hardware and tools that are suitable for you. The picture on the right shows some information and idea of this network topology, and please be aware that the device names used in this lab are clearly addressed this picture

	*I used the Linksys wireless router (WRT54G) as the wireless access point. I set it up as shown in the picture on the right.		*I used the Linksys wireless router (WRT54G) as the wireless access point. I set it up as shown in the picture on the right.

← Older revision		Revision as of 19:08, 1 August 2010
Line 45:		Line 45:
	[[Image:bt04.jpg\|thumb\|Results of the commands.\|250px]]		[[Image:bt04.jpg\|thumb\|Results of the commands.\|250px]]
	This section is optional for someone who doesn't need change you adapter MAC Address. To generate a faked MAC Address, follow the steps below.		This section is optional for someone who doesn't need change you adapter MAC Address. To generate a faked MAC Address, follow the steps below.
	*Run a '''~~Shell –~~ Konsole''' terminal program. To run a '''~~Shell -~~ Konsole''' terminal, click on the black screen icon that is located on the lower left hand corner next to the '''K Menu''' icon.		*Run a '''Konsole''' terminal program. To run a '''Konsole''' terminal, click on the black screen icon that is located on the lower left hand corner next to the '''K Menu''' icon.

	*In the '''~~Shell -~~ Konsole''' terminal, enter the command below to fine your device interface name. When the name of your device interface name is shown, take note of the device interface name. My device interface name is wlan0, as shown in the snapshot on the right.		*In the '''Konsole''' terminal, enter the command below to fine your device interface name. When the name of your device interface name is shown, take note of the device interface name. My device interface name is wlan0, as shown in the snapshot on the right.
	airmon-ng		airmon-ng
	*Enter the 4 commands below by typing each command and press Enter key.		*Enter the 4 commands below by typing each command and press Enter key.
Line 76:		Line 76:
	The following two commands are used to attack and force the access point (Target AP) to inject data packets to increase data traffic on the network. However, when you are running these two commands, any client computer that is connecting to the access point may lose connection or unable to connect to the Internet. Sometime you may have to power-cycle the access point in order to get connection again. Some time you may have difficulty using these commands, and you may get some massage says that attacking was not successful. If you have difficulty using these commands during the steps below, just ignore it and continue working on the next step. (This section may be optional for someone.)		The following two commands are used to attack and force the access point (Target AP) to inject data packets to increase data traffic on the network. However, when you are running these two commands, any client computer that is connecting to the access point may lose connection or unable to connect to the Internet. Sometime you may have to power-cycle the access point in order to get connection again. Some time you may have difficulty using these commands, and you may get some massage says that attacking was not successful. If you have difficulty using these commands during the steps below, just ignore it and continue working on the next step. (This section may be optional for someone.)

	*Open a new '''~~Shell –~~ Konsole''' terminal. '''Important:''' Make sure to leave the previous commands running without closing the first '''~~Shell -~~ Konsole''' terminal.		*Open a new '''Konsole''' terminal. '''Important:''' Make sure to leave the previous commands running without closing the first '''Konsole''' terminal window.

	[[Image:bt07.jpg\|thumb\|Increasing traffic snapshot.\|250px]]		[[Image:bt07.jpg\|thumb\|Increasing traffic snapshot.\|250px]]
Line 93:		Line 93:
	[[Image:bt08.jpg\|thumb\|thumb\|upright\|WEP cracking command output: KEY FOUND!\|592px]]		[[Image:bt08.jpg\|thumb\|thumb\|upright\|WEP cracking command output: KEY FOUND!\|592px]]
	This is the final and the actual step to crack the WEP key.		This is the final and the actual step to crack the WEP key.
	'''NOTE:'''You should wait until enough data packets has been captured before you run the cracking command below; otherwise it will not success. Check to see if you have enough data packets capture in the firs ~~Shell -~~ Konsole terminal; it is the number right below the #data column. You should wait until this number goes above 10000 or 20000 in order to successfully crack the WEP key.		'''NOTE:'''You should wait until enough data packets has been captured before you run the cracking command below; otherwise it will not success. Check to see if you have enough data packets capture in the firs Konsole terminal; it is the number right below the #data column. You should wait until this number goes above 10000 or 20000 in order to successfully crack the WEP key.

	*When you are ready, open the third ~~Shell -~~ Konsole teminal without closing the first two ~~Shell -~~ Konsole ~~terminal~~. You should keep them open and running.		*When you are ready, open the third Konsole teminal without closing the first two Konsole terminals. You should keep them open and running.

	* Enter the following command.		* Enter the following command.
Line 105:		Line 105:
	===<h2 id="ly-proj" style="margin:3px; background:#cef2e0; font-size:110%; font-weight:bold; border:1px solid #a3bfb1; text-align:left; color:#000; padding:0.2em 0.4em;">Conclusion</h2>===		===<h2 id="ly-proj" style="margin:3px; background:#cef2e0; font-size:110%; font-weight:bold; border:1px solid #a3bfb1; text-align:left; color:#000; padding:0.2em 0.4em;">Conclusion</h2>===
	Cracking WEP is fairly easy. Even though I have little knowledge about using Linux and networking, I can crack a WEP key easily. Using Linux to crack WEP is more common than using Windows. That is because most of the software and tools needed to crack WEP are build-in within Linux Operating system, and there are more Linux supported wireless adapters available. If you want to crack a WEP for any reason, you should build your own lab. You should be aware that hacking others' network is illegal, so please don't try. This article is written for educational purpose, so I built my own lab and cracked my own network. It takes me a few days to write this article, but the actual time that it takes me to crack the WEP key is less than five minutes. The following steps and commands are what I actually have done to crack the WEP key in this lab.		Cracking WEP is fairly easy. Even though I have little knowledge about using Linux and networking, I can crack a WEP key easily. Using Linux to crack WEP is more common than using Windows. That is because most of the software and tools needed to crack WEP are build-in within Linux Operating system, and there are more Linux supported wireless adapters available. If you want to crack a WEP for any reason, you should build your own lab. You should be aware that hacking others' network is illegal, so please don't try. This article is written for educational purpose, so I built my own lab and cracked my own network. It takes me a few days to write this article, but the actual time that it takes me to crack the WEP key is less than five minutes. The following steps and commands are what I actually have done to crack the WEP key in this lab.
	*'''Step 1'''. I opened a ~~Shell -~~ Konsole terminal and typed the following commands.		*'''Step 1'''. I opened a Konsole terminal and typed the following commands.
	airmon-ng		airmon-ng
	airmon-ng stop wlan0		airmon-ng stop wlan0
Line 113:		Line 113:
	airodump-ng wlan0		airodump-ng wlan0
	airodump-ng -c 1 -w capfile --bssid 00:13:10:3C:51:5B wlan0		airodump-ng -c 1 -w capfile --bssid 00:13:10:3C:51:5B wlan0
	*'''Step 2'''. I opened another ~~Shell -~~ Konsole terminal and typed the following commands.		*'''Step 2'''. I opened another Konsole terminal and typed the following commands.
	aireplay-ng -1 0 -a 00:13:10:3C:51:5B -e TestingAP wlan0		aireplay-ng -1 0 -a 00:13:10:3C:51:5B -e TestingAP wlan0
	aireplay-ng -3 -b 00:13:10:3C:51:5B -h 00:11:22:33:44:55 wlan0		aireplay-ng -3 -b 00:13:10:3C:51:5B -h 00:11:22:33:44:55 wlan0
	*'''Step 3'''. I opened another ~~Shell -~~ Konsole terminal and typed the following command.		*'''Step 3'''. I opened another Konsole terminal and typed the following command.
	aircrack-ng -b 00:13:10:3C:51:5B capfile-01.cap		aircrack-ng -b 00:13:10:3C:51:5B capfile-01.cap

	KEY FOUND!		KEY FOUND!